v0.6.4

[0.6.4] - 2026-10-10

Changed

• Docs-only: neutral wording for a downstream tenant reference in module docstrings (#65). No API or behaviour change.
• Docs-only: scope public security claims to the tested topology (#67). CaMeL-style
  control/data-flow separation reduces the injection-to-effect risk under stated
  assumptions. It is not a proof that prompt injection is unable to cause an unauthorized
  effect. README, landing page, package description, SECURITY, development notes, and the
  working-paper source now use that wording, with an explicit Threat model & limits
  section (assumptions, test citations, non-goals). Documentation and metadata only; no
  runtime behaviour change.